Summary

If you disassociate an issue security scheme from a project and then delete it, it doesn't actually remove that issue security level from the issue, which renders the issue inaccessible.

Environment

• JIRA v7.2.0-OD-05-030

Steps to Reproduce

1. Create a new issue security scheme and level
2. Associate that issue security scheme with a project and associate the issue security level with an issue.
3. Disassociate the issue security scheme from the project, you'll be told that the security level will be removed from x issues. Nothing actually happens if you check the DB.
4. Delete the security scheme
5. Browse to the issue in step 2.

Expected Results

Issue has no security level and anyone can see it.

Actual Results

Issue can not be viewed by anyone.

Workaround

Remove the issue security link to un-existing issue security levels

update jiraissue set security = null where security in (select distinct security from jiraissue where security not in (select id from schemeissuesecuritylevels ) and security is not null);